Most Expensive Crypto Hacks Leaderboard

The biggest Web3 and DeFi exploits ranked by amount lost. Track high-impact incidents, study attack patterns, and learn how security failures scale into multi-million dollar losses.

  • $91B+

    Total Value Lost

  • 3595

    Incidents Tracked

  • 141

    Chains Affected

  • 65

    $100M+ Incidents

Top 10 Biggest Hacks

Jump to full leaderboard
  1. 🥈

    Mantra

    $5.50B

  2. #4

    LuBian

    $3.50B

    bitcoin

  3. #7

    Thodex

    $2.00B

  4. #9

    Finiko

    $1.50B

  5. #10

    Bybit

    $1.40B

    ethereum

Where the Largest Losses Concentrate

Top Chains by Losses

  • ethereum $9,830M
  • bitcoin $5,404M
  • bsc $3,037M
  • solana $1,697M
  • polygon $1,539M

Top Techniques by Losses

  • Other $52,517M
  • Rugpull $15,631M
  • Private Key Compromised (Brute Force) / Weak Key Generation $3,500M
  • Safe Multisig wallet Phishing Exploit / Access Control / Signer Phishing $1,635M
  • Access Control / Hot Wallet Key Compromised $1,027M

Full Leaderboard

Showing 1551-1600 of 3595 ranked incidents

Largest Web3 incidents by USD amount lost
Rank Project Amount Lost Date Chain Technique Attack Guide Source
1551 DeFido $114K - Rugpull — View →
1552 Stanley the Bugman $114K - Rugpull — View →
1553 CBC Token $113K - Rugpull — View →
1554 AutoChain Global $113K bsc Unknown — —
1555 Cdecker $113K - Access Control Access Control Attacks View →
1556 PancakeHunny $112K bsc Other / Incorrect Share Accounting — View →
1557 AISurf $112K - Rugpull — View →
1558 OpenAI LASA $112K - Rugpull — View →
1559 Pervasive Information Community Organization $112K - Rugpull — View →
1560 Dark Matter $112K ethereum Rugpull — —
1561 Vice.Uno $111K binance Rugpull — View →
1562 FlokiChain $111K - Rugpull — View →
1563 DIP $111K bsc Swap Logic Flaw — —
1564 Abracadabra Money $111K - Oracle Issue Oracle Manipulation & Price Manipulation View →
1565 Ambient $111K ethereum Deposit Logic Flaw — —
1566 F*ck The Merge $110K - Rugpull — —
1567 Banana Swap $110K - Other — View →
1568 MAP Protocol $110K bsc, ethereum Infinite Mint — —
1569 MetaSea $110K arbitrum Withdrawal Logic Flaw — —
1570 WXETA $110K bsc, ethereum Access Control Exploit / Uninitialized Proxy Access Control Attacks View →
1571 OSN Token $110K - Flash Loan Attack Flash Loan Attacks View →
1572 Transit Finance $110K bsc, ethereum Missing Input Validation — —
1573 FFIST $110K bsc Reward Logic Flaw — —
1574 ETE Token $110K - Rugpull — View →
1575 NWN $110K - Rugpull — View →
1576 INFI Governance and Utility Token $110K ethereum Rugpull — View →
1577 RWC Token $109K - Other — View →
1578 ERC20 Token Bank $109K - Flash Loan Attack Flash Loan Attacks View →
1579 Boring Nakas $108K - Rugpull — View →
1580 Bitcurex $108K - Other — View →
1581 SPROUT $108K - Rugpull — —
1582 GigaDAO $108K - Rugpull — View →
1583 TonUP $108K ton Reward Logic Flaw — —
1584 QuickSwap $108K polygon Other / DNS Hijack — View →
1585 To the Moon $107K - Rugpull — View →
1586 NovaBox $107K ethereum Incorrect Share Accounting — —
1587 ModelpiToken $107K - Other — View →
1588 Fake zkSync $107K - Rugpull — View →
1589 JNB Token $106K - Rugpull — View →
1590 Mina Protocol $106K - Rugpull — View →
1591 YZY DAO $106K ethereum Rugpull — View →
1592 DigiFund $106K - Rugpull — View →
1593 Thetanuts Finance $105K ethereum Flash Loan Attack / Rounding Error Arithmetic Overflow & Underflow Attacks View →
1594 TetherShiba $105K - Honeypot — View →
1595 SellToken $105K - Other — View →
1596 SteamSwap $105K bsc Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1597 Secured Finance Lending $104K ethereum Spot Price Manipulation Oracle Manipulation & Price Manipulation —
1598 DarkPool $104K - Other — View →
1599 SushiSwap $104K ethereum Swap Logic Flaw — —
1600 FDB $104K - Rugpull — View →

Data sourced from DefiLlama & SunWeb3Sec/DeFiHackLabs . Thank you for keeping Web3 security data open.

Understanding the Pattern Behind Billion-Dollar Losses

The most expensive crypto hacks are not random. They cluster around repeating vulnerability patterns: access-control failures, flash-loan manipulation, oracle abuse, and unsafe external calls. Studying large-loss incidents helps security researchers prioritize high-impact threat models first.

For deeper context, explore the full Web3 Hacks Dashboard and our Smart Contract Attack Library for hands-on exploit and mitigation breakdowns.

Frequently Asked Questions

How is this leaderboard ranked?

Incidents are ranked by parsed USD amount lost in descending order. Records without parseable loss values are excluded from this ranking.

Does this include every attack type?

It includes all incidents with known loss values in the database. Use the full dashboard for broader filtering and lower-severity incidents.

How can I learn to prevent these exploits?

Study attack-class pages first, then practice in guided exercises inside the Smart Contract Hacking course.

Learn to Prevent High-Impact Smart Contract Hacks

$91B+ lost to preventable vulnerabilities. Master real exploit patterns and defense techniques with hands-on Web3 security training.